Review – 2 Advisories and 1 Update Published – 10-27-26

Today CISA’s NCCIC-ICS published two control system security advisories for products from Mitsubishi and EPICS. One updated advisory was also published for products from Eufy. 

Advisories  

Mitsubishi Advisory - This advisory describes four vulnerabilities in multiple product Mitsubishi and ICONICS product lines. Three of the vulnerabilities were self-reported; the other is a third-party (Google) vulnerability with known exploits. 

EPICS Advisory  This advisory describes four vulnerabilities in the EPICS Base of the Argonne Labs Experimental Physics and Industrial Control Systems (EPICS) toolkit. The vulnerabilities were reported to CISA by Shubham Raj of Cipher by Causal Security. 

Updates  

Eufy Update - This update provides additional information on the Omni C20 advisory that was originally published on September 24th, 2026. The new information includes updating affected versions and the Mitigation section. 

For more information on these advisories, including a DTRH look at publicly available exploits, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-and-1-update-published-e7f - subscription required.